BINOMIAL SQUARES IN PURE CUBIC NUMBER FIELDS 



F. LEMMERMEYER 

Abstract. Let K = Q(aj) with oj^ = m be a pure cubic number field. We 
show that the elements a a whose squares have the form a — u) form a 
group isomorphic to the group of rational points on the elliptic curve l^rn '• 
y2 _ ^3 _ This result will allow us to construct unramifiod quadratic 
extensions of pure cubic number fields K without any calculations in K. 



Introduction 

The first attempt of solving tlie diophantine equation y'^ = + 1 (or, equiva- 
lently, determining the integral points on this elliptic curve) probably is writing it 
in the form {y — l){y + 1) — and using unique factorization. If y is odd, one 
possibility we have to consider is y — 1 = 2a'^ and y + 1 = 4b^ for integers a, b. 
This implies — 25^ = —1, which has the obvious solution (a, 6) = (1,1), giving 
the solution {x,y) = (2,3) of the original equation. Showing that a'^ — 2b^ = — 1 
does not have any other solution is a slightly technical task. A famous result due 
to Delaunay and Nagell shows that equations — mb^ = 1 for noncubes m have 
at most one integral solution. For proving this result one needs to study units of 
the form a — b-\/rn in pure cubic number fields and show that these units, with a 
few exceptions, cannot be powers of other units. 

In this article we shall investigate squares of the form a + b-^/rn in pure cubic 
number fields and explain why their occurrence in diophantine problems related 
to elliptic curves is quite natural. We will also show how to apply our results to 
the construction of unramified quadratic extensions of pure cubic number fields; 
in particular, we will give these extensions for all values 2 < m < 113 for which 
K = Q(-y/m) has even class number. 

Let us start by giving a few nontriviaj^ binomial squares of the form a — \/2 in 
Q(^): 

(1-^2-^)2 = 5-^, 
(9-6v/2-2v^)2 = 129- lOOv/2, 
(16641 - 25800v^- 20000v^)2 = 2340922881 - 58675600v^, 

where 58675600 = 76602. 

This abundance of examples in Q(v^ ) should not mislead the readers into think- 
ing that this is a typical phenomenon; in fact, there are no nontrivial squares of the 
form a - at aU in Q(v^). 



Trivial examples are = + ^fm and ^frrfi = + m ^fm. 
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1. The Group Law 

Fix a cubefree integer m, let K — Q(-^/to) denote the corresponding pure cubic 
number field, and consider the set 

S„,^{a(^K'' : = a - ^ : a e Q""}. 

Writing a = r + suj + tui'^ with ui = ^fm we find that the condition o? = a — ui \s, 
equivalent to the system of equations 

2rt + s2==0, (1) 

2rs + mt^ = -l, (2) 

2msi + = a. (3) 

Since t = implies s = and a = (which is the trivial solution), we may 
assume that i 7^ 0; solving ^\ for r and plugging the resulting equation r — /2t 
into ([2| we find —s^/t + = —1 which, after dividing through by gives the 
point 

Pa = (x, y) — on the elliptic curve y^ — ~ m. 

The missing parameters a and r are given by r/t = -\{sltf and by m. 
Conversely, every affine point {x,y) € i?m(Q) gives a unique element of 

Sjn via 

1 X + 8ma; 

s=-, , and a= . (4) 

y y 2y Ay^ 

Of course we make the point at infinity on i?m(Q) correspond to the (class of the) 
trivial element 1 G Sm- 
We have proved 

Theorem 1. Let m be an integer that is not a cube, let K — Q(w) with ijj^ = m 
denote the corresponding pure cubic field, and let denote the elliptic curve 
y^ = — m. There is a bijection between the rational points (x,y) G Em{Q) and 
the elements a £ with o? — a ~ oj for a £ . In fact, if a = r + suj + 
tup satisfies o? = a — uj , then {x,y) G £'m(Q) for x = j and ?/ = |. Clearly 
a — 1 corresponds to the point at infinity on E, and multiplication by —1 in 
corresponds to multiplication by ~1 in Em{Q)- 
Conversely, an affine point {x,y) corresponds to 

x"^ X 1 2 , 2 2;^ + Smx 

a — \ — w H — w with a — oj. 

2y y y Ay^ 

Multiplying through by 4?/^ gives the simpler identity 

{x^ - 2xu: - 2iJf X* + Smx - 4y^w, 

which can easily be verified directly. 

Remark. If a = r + scj + tuj^ with lo = ^fm satisfies = a — a; for some a G , 
then ai — r — su! + tuP' has the property that a\ = c — dio for rational numbers c, 
d; this is due to the fact that Eqn. ([T]) remains invariant under s — !■ —s. 

Corollary 2. If Em : y^ — x^ —m has no rational point except the point at infinity, 
then the only squares of the form a ~ uj in K = Q(w) with a € and uj = y/rn 
are those with a — r^ for r G . 
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Remark. Torsion points of order 3 on £",„ may be neglected; in fact, the torsion 
points {0,±k) on — + give rise to the trivial solutions vA?^ — k-\/k. 

Some expressions occurring in Thm. [T] have a natural explanation in terms of 
the group law on elliptic curves. 

The group law on Em is given by the following formulas: given rational points 
{xi,yi) and {x2,y2), set 




Then {xi,yi) + {x2,y2) = (xa^ys) with 

X3 = - xi - X2, 2/3 = Axs + yi - Axi. 

The duplication formula for P = {x,y) is given by 

/■x'^ + 8mx x^ — 20mx^ — 8m^ \ 
" V V ' §p )■ 

Comparing this formula with Q we immediately get 

Corollary 3. The element a — lu is a square in K if and only if a ~ X2P for some 
point P e Ejn{Q)- In this case, N{a — lu) — y|p. 

The last claim is a simple calculation: 

/a;^ + 8mx\3 / x^ — 20mx^ — 8rr 

This result can be used to simplify a technical point in [3 . There we have proved 
(a special case of) the following result via descent: 



Proposition 4. Let m be a cubefree integer, and let E : y^ = x^ — m denote an 
elliptic curve. If P £ E{Q) \ 2E{Q) is written in the form P — (p-, p-) for integers 
r, s, t with gcd(r, t) = gcd(s, t) = 1, then a = r — t^LO G is not a square in K . 

Cor. |3] shows immediately that a is a square in K if and only if a;p = ^ = X2Q 
is the x-coordinate of a point 2Q on Em- 

Example. Consider the element /3 = 5 — \^ in K ~ Q{\^), whose norm 5'^ — 4 = 
11^ is a square. For deciding whether /3 is a square in K we observe that the point 
P = (5, 11) on y2 = - 4 is a muhiple of 2 since P = 2(2, -2). Thus /3 = is 
a square, and the formulas above give a — —I + v^i + ^ v/l6 = — 1 + + s/i as 
well as NP = N{a)'^ = 11^. 

The Example of Bachet-Fermat. Consider the curve E2 y'^ ~ x^ ~ 2. The 

integral point {x, y) = (3, 5) corresponds to 

ap^-^^ + \^/2+\^^l with al = ^-^/2. 
10 5 5 100 

Multiplying through by 10^ shows that P gives rise to 

(-9 4-6v^ + 2v^)2 = 129 - 100^. 
Observe that 2P = (ygl, corresponds to 

16641 1290 1000 , 

ttop = 1 ijj H ijj 

7660 383 383 
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with alp = ^58675600^ ~ ^- Finally we remark that 
/ 164323 66234835 N 

1^71^' 171^/' 
_ 27002048329 28099233 3/^ 5000211 3^ 

~ 22652313570 ^ 66234835 ~ 66234835 

2. Explicit Multiplication Formulas 

Recall that we have constructed a bijection between elements a £ with 
= a — oj and rational points on the elliptic curve Em ■ y"^ = — m. The group 
structure on i?m(Q) induces, by transport of structure, a group law on Sm- In this 
section we will give explicit formulas for the group law on 5*7^. 

To this end assume that aj = rj + SjW + tjuj"^ {j = 1,2) are elements whose 
squares have the form aj — uj. Then these elements correspond to the points 



on the elliptic curve : = .t"* — m. The sum P3 = Pi + P2 corresponds to an 
element £ with = 03—0;, and we can compute formulas for 0:3 ~ ai*a2 by 
using the group law on elliptic curves. The "multiplication formulas" for the aj have 
little if anything to do with multiplication in and are rather complicated. It 
remains to be seen whether there is any geometric interpretation of these formulas. 
If |i ^ then we find 



X3 = 



2/3 = 



1 

t2 tl 



£3. 

t2 tl 



L) ^1 ^'^ - ( *1 ~ *2 Y Si 
-I U to. \t-i So - toS-i J U 



tl t2 \tiS2 — t2Si/ tl t2 
tl — t2 / Si \ 1 



51 V tlJ tl 



tiS2 - t2Si 

From these values we can compute the coefficients of 

ai * a2 ^ ~ + s^uj + t^uj'^ . 

For what it's worth, the corresponding values of S3 and t^ are given by 

X3 num(s) 1 num(i) 

ys den(s) ' ^ ys den(f) 

with 

num(s) = {Sit2 - S2tl){{sit2 + S2tl){sit2 - S2tlf - tit2{tl - t2f) 
den(s) = tit2{ti - t2)^ + (51*2 - S2ti)^{sitl + 2{S2 - Si)t2ti - S2tl) 

num(f) = (52*1 - 51*2)^*1*2, 

den(*) = *i*2(*l - t2f + (Sl*2 - S2*l)^(si*2 + 2(S2 - Sl)*l*2 - S2*?). 

Setting 

5- = si*2 — S2*i, 5+ = si*2 + S2*i,T'_ = *i — *2 and T+ = *i*2, 
as well as 

S = Sitl + 2{S2 - Sl)*l*2 - S2*? = (S2 - Si)T+ - S+T_, 
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the muhiphcation formulas become 

SlS+ - S-TIT+ 



S3 



Let us check these formulas by "multiplying" the elements 

1 ,rr , 16641 1290 

-v4 and a2 — 



We find 

S2 = 

S = 
This yields 

S3 = - 



10 

3 

^5 
1290 

^83" 
6138414 

" 733445 



28099233 
66234835' 



7660 



383 



1000 
"383" 



t2 



1 

~5 
1000 

"383" 



342 




200 






383 




~383 


858 


T_ = 


5383 






383 




1915 



5000211 
66234835' 



si _ 27002048329 
2t^ ~ 22652313570 



in perfect agreement with our calculations at the end of Section [T] 

3. Squares of the Form a~hu> 

Consider more generally the problem of classifying squares of the form a — bu 
for some fixed value oi b € . Since a — bco = a — uj' for co' ~ \fm)fi we find, by 
simply replacing m with m\? in Thm. [l] the following 

Theorem 5. Let m be an integer that is not a cube, let K = Q(a;) with uj^ = m 
denote the corresponding pure cubic field, and let Em denote the elliptic curve 



2 _ ^3 



m. There is a bijection between elements a £ with a = a ^ buj for 



y 

a,b € Q and the rational points {x,y) S E'^ 
quadratic twist of E„i . 



), where E'^ 



y 



ib^ 



In fact, if a = r + suj + tuj satisfies a = a — buj, then {x,y) £ E'^ 



for 



X = bs/t and y — b"^ /t. 

Conversely, an affine point {x,y) G 

x^ bx b"^ 



1 cj H UJ 

^y y y 



with a 



corresponds to 
x^ + &rax 



4y2 



buj. 



In particular, a—buj is a square withN{a—buj) = y^ if and only if{a,y) € 2E'{Q). 
Example. The unit 

-19 + 7v^= (1+ v^- y/^f 

is a well known example due to Nagell f3| ; since = ^ , it comes from 

the point P(— 2, —2) on the quadratic twist —7y^ = x"^ — 20 of the elliptic curve 
y^ — x^ ~ 20. The corresponding point on the elliptic curve y^ — x^ + 1^ ■ 20 is 
P'(14,98). Observe that 2P' = (-19, 1). 

Corollary 6. There is a binomial unit a — buj that is a square in K if and only of 
there is an integral point (a, 1) G 2E{Q) on E : y^ — x^ ~ mb^ . 
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4. A HOMOMORPHISM FROM E{Q) TO Cl(/^) 

In this section we will define a map from E{Q), the group of rational points 
on E : = — m (where m ^ 0,±1 mod 9 is a cubefree integer), to the group 
Cl(iir)[2] of ideal classes of order dividing 2 in if = Q{y^), and show that this 
map is a homomorphism. 

Theorem 7. Let m ^ 0,±1 mod 9 be a cubefree integer, and consider the cubic 
number field K = Q(-y/m) and the elliptic curve E : = ~ m. For any P = 
{x, y) e _E(Q)\{(xi}, set x = a/e^ for coprime integers a and e. Then (a— e^w) ~ , 
and the map P — >■ [a] induces a homomorphism k : E{Q) — > Cl{K)[2\. 

Proof. Since a'^/b^ — m ~ y^ we find that N{a — bLu) = y^b^ . Since 6 = is a square 
(see p. 68]), the norm of a = a — 6aj is a square. Thus (a) is an ideal square 
if and only if a — few is coprime to its conjugates a' = a — bujp and a" — a — bujp^ 
in the normal closure L of K/Q. Let be the greatest common ideal divisor of a 
and a' . Then | a" , hence c) divides the trace 3a of a as well as the difference 
a — a' = bijj{l — p). Since a and b are coprime, 5 is a product of ideals above 3. 

Since we have assumed that m ^ ±1 mod 8, we have (3) = q"^ in K (see e.g. 
[1] for the decomposition law in pure cubic number fields). Assume therefore that 
q I (a) (this implies that q | (a') since q is totally ramified). If 3 | m, then 3 | a, 
and from y^ — /b^ — m we deduce that 3^ | m contradicting our assumptions. 
If 3 -j" m, then — mb^ — y^b^ is divisible by 3 if and only if it is divisibly by 
9, and now a"^ = mb'^ mod 9 implies that m = ±1 mod 9, again contradicting our 
assumptions. Thus (a) — o^, and [o] — k{P) is an ideal class of order dividing 2 in 
K. It remains to show that k is a homomorphism. 

To this end, assume that xp = a/b and xq = c/d for P,Q(z E{Q). Set k{P) = [a] 
and k{Q) = [b]. We have to show that k{P + Q) = [ab], which is equivalent to 
k{P)k{Q)k{R) ^ 1 for colhnear rational points P,Q,R& E{Q). 

The Weil map a : E{K) — > K"^ / K"^ ^ defined by 

Ux-uj)K'<^ if (x,y), y^O 
a{P)^ liujK'^^ ifP==(a;,0), 
[ifX2 ifP^O 

(see e.g. (4.2)]) is a homomorphism, and if we restrict a to E{Q), then the 
second case cannot occur. This shows that {xp — uj){xq — uj)[xp, — w) is a square 
in . Thus (a - buj){c - duj){e - fui) = /J^, where xji = e/f, and a^b^c^ {(3)^. 
But this implies abc = (/3). □ 

We now discuss a few examples. 

Example 1. Let K = Q(v^) and E : y^ ^ x^ - 26. Then E{Q) is generated by 
P = (3, 1) and Q = (35, 207). The element 3 - a; is a unit, and (35 - w) = 3?32q^ 
where (3) — 3133 and where q is a prime ideal above 23. 

This shows that the condition to ^ ±1 mod 9 cannot be dropped. 

Example 2. Let K = Q{y^) and E : y^ = x^ - 47. Then E{Q) is generated by 
P = (6,13) and Q = (12,41); moreover, P + Q = (34/9,-71/27). We have 

(6-c^)-p?^, (12-c.)=p2,, (34-9c^)=p?i. 

The ideals P13 and p4i generate the ideal class of order 2, the ideal P71 is principal. 
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Example 3. Let m = 57; then E{q) is generated by P = (4873/36, -340165/216), 
(4873 — 36w) = a^, and a is principal. The elliptic curve E' : — — 57^ has 
rank according to sage since L[E' , 1) 7^ 0, and has nontrivial Tate-Shafarevich 
group m.{E'). 

This suggests the question whether there is any connection between the kernel 
of K in £'(Q) and the Tate-Shafarevich group m(£") of £". 

Remark. If we consider the more general case of elliptic curves = x^ — mb^, 
then a point (x, y) € E{Q) with x = a/e^ provides us with an element a = a — be^uj 
with square norm N{a) — a'^ — mb^e^ — (ye^)'^; yet (a) need not be an ideal square 
if gcd(a, b) 1. In fact, (14, 44) is a rational point on y^ — x^ ■ 101, and neither 
(14 — 2uj) nor (7 — w) are ideal squares in K — Q{uj) with ui^ = 101. 
On the other hand, the proof of Thm. [7] shows 

Lemma 8. Assume that m is a cubefree integer with m ^ 0,±1 mod 9, set lj = 
^/m, and let P = (x, y) be a rational point on E : y^ — ~ mb'^ for some integer 
b. If x = a/e^, then {a — be^to) is an ideal square in K i/gcd(a, b) — 1. 

5. HiLBERT Class Fields 

Let K — Q(cj) with w"^ = m be a cubic number field, where we assume that 
m ^ 0, ±1 mod 9, and let E : y^ — — mb^ be a quadratic twist of E. If 
P = {x,y) e E{Q) \ 2E{Q) is a rational point with x = r/s^ and coprime integers 
r, s, then a = r — s^bui G K has norm r^ — ms^b^ — y^ (bs)^- Since a is not a square, 
Kp = K{y/a) is a quadratic extension; since (a) is an ideal square by Lemma [sj 
L/K can only ramify at the primes above 2 and 00. If 2 | s and if r is chosen 
positive, then r = 1 mod 4 since r^ = 1 mod 4, and in this case the extension Kp 
is unramified everywhere. 

Table [1] lists the pure cubic number fields with even class number and m < 113, 
an elliptic curve E whose rational points provide us with unramified quadratic 
extensions K{y/a). 

If 771 = 113, the three quadratic unramified extensions are 

fi{x) = - 291a;'' + 282272;^ - 717409 

f^{x) = - 130347x4 + 5663446803x2 - 34351825047849 

/3(x) =x^ - 3771x4 4740147x2 - 1186320249 

Since neither of the three points from which these extensions originate are in 2E{Q), 
these three extensions are pairwise distinct. 

In the case of m = 2351, it can be checked that the three unramified (in all three 
cases, we have a > 0, so there is no ramification at infinity) quadratic extensions 
generated by a root of the polynomials 

/i(x) = x^ - 171x4 + 9747x2 - 4247721, 

/2(x) ^x^ + 1653x4 + 910803x2 - 92717641, 

fsix) =x^ + 261x4 + 22707x2 - 3404025 

are independent. 

Our results suggest that every unramified quadratic extension of a pure cubic 
number field K = Q( ) can be computed from a rational point on some quadratic 
twist of the elliptic curve y^ ^ x^ — m. 
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m 


Ch{K) 


E 






Xp 


a 


11 


2 


y' 


= x' 


- 11 


9/4 


9-4w 


15 


2 


y' 


= x^ 


+ 15 


1/4 


1 + 4w 


39 


2 


y' 


= x' 


+ 39 


217/4 


217 + 4w 


43 


4 


y' 


= x^ 


-43 


1177/36 


1177 -36w 


47 


2 


y' 


= x^ 


+ 47 


17/4 


17 -4a; 


57 


2 


y' 




- 57 


4873/36 


4873 - 36a) 


58 


2 


y' 


= x3 


-58 


5393/484 


5393 - 484a; 


61 


2 


y' 


= x^ 


- 61 


929/100 


929 - 100a; 


63 


2 


y' 


= x^ 


+ 63 


9/4 


9 + 4a; 


65 


2 


y' 




+ 27-65 


129/4 


129 + 3 - 4a; 


66 


2 


y' 


= X^ 


+ 66 


1/4 


1 + 4a; 


67 


2 


y' 


= X^ 


-67 


17/4 


17 -4a; 


76 


2 


y' 




- 76 


17/4 


17 -4a; 


79 


2 


y' 


= x' 


+ 27-79 


1921/100 


1921 + 3 • lOOo; 


83 


2 


y' 


= x^ 


-83 


33/4 


33 -4a; 


89 


2 


y' 


= x^ 


-89 


153/4 


153 - 4a; 


101 


2 


y' 


= x^ 


- 101 


6342921/1073296 


6342921 - 1073296a; 


105 


2 


y' 


= x^ 


-1052 


16465/196 


16465 - 196a;2 


106 


2 


y' 


= x^ 


- 106 


8297/1024 


8297 - 1024a; 


113 


(2,2) 


y' 


= x^ 


-27- 113 


97/4 
43449/2500 
1257/64 


97 - 3 • 4a; 
43449 - 3 - 2500a; 
1257 - 3 - 64a; 


2351 


(4,2,2) 


y' 


= x^ 


+ 27m 


57/4 
-551/16 
-87/4 


57 + 3 - 4a; 
-551 + 3 - 16a; 
-87 + 3 - 4a; 



Table 1 . Quadratic Unramified Extensions of Pure Cubic Num- 
ber Fields 
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